Nataly Garcia

The aim is to bridge disciplines: explain legal constraints to product, policy and business teams, and understand enough about technology to make the rules usable. The reasoning is practical: regulation that ignores how systems are built does not get implemented.

Reflecting on the first year of the EMILDAI master's at Dublin City University, Garcia writes that “the lawyer of the future cannot operate in legal silos” and that lawyers need to become “translators between law, technology, policy, and business.” They point to data governance, GDPR, AI regulation, comparative digital law and wider questions around trustworthy AI.

Read original

They point to conversations about people, institutions and trust rather than technology itself, and describe the professional aim as connecting policy with implementation and helping organizations navigate digital transformation responsibly.

In a summer roundup covering four stops — FutureLaw 2026 in Tallinn, the Computers, Privacy and Data Protection conference in Brussels, the EMILDAI summer school in Avignon on building public AI in Europe, and an AI governance and comparative law summer school in Warsaw — Garcia says one theme kept emerging: “How do we move from principles and regulation to practical implementation?”

Read original · Original 2

The classroom supplies the framework; conversations around it build judgment. They write that classmates, researchers, policymakers, entrepreneurs, lawyers and engineers often taught as much as the lectures by approaching the same problem from different angles.

The first-year post lists the International Association for Safe and Ethical Artificial Intelligence conference in Paris, FutureLaw in Tallinn, Computers, Privacy and Data Protection in Brussels and ICANN in Dublin.

• The summer post returns to the same idea: “The classroom may provide the framework.
• But often, the most valuable lessons happen beyond it.”

Read original · Original 2

The master's programme runs through Dublin and León, and the course list centers on comparative law — comparative digital law, comparative law of AI and new technologies — alongside a stated interest in European public AI and data commons. Because AI products and data flows cross borders, the analysis has to compare regimes.

Garcia's education is described as spanning El Salvador, the United States, Chile, Germany, Ireland and now Spain. The summer school they attended in Avignon was titled “Building Public AI in Europe: From Data Commons to Compliance.”

The emphasis shifts between posts: the first-year reflection covers governance and regulation broadly, while the later post on the León semester focuses on cybersecurity, digital rights, and AI law and ethics, naming cybersecurity as the specialization.

Read original · Original 2 · Original 3

Nataly Garcia marks one year since moving to Dublin for the European Master in Law, Data and Artificial Intelligence (EMILDAI), describing an education that has taken them from El Salvador to the United States, then Chile, Germany and Ireland.

• The post names the subjects studied — data governance, GDPR, AI regulation, comparative digital law and the wider questions around trustworthy AI — and lists conferences attended: the International Association for Safe and Ethical Artificial Intelligence conference in Paris, FutureLaw in Tallinn, Computers, Privacy and Data Protection in Brussels, and ICANN in Dublin.
• Garcia states the professional aim directly: 'Building responsible AI governance frameworks.
• Connecting policy with implementation.
• Helping organizations navigate digital transformation responsibly.' The post also argues that 'the lawyer of the future cannot operate in legal silos' and needs to translate between law, technology, policy and business.
• It ends with the next step: an EMILDAI summer school in Avignon and a cybersecurity specialisation at Universidad de León.

For brands planning a campaign

For hiring a junior candidate in AI compliance, this post carries the candidate's own statement of intent and shows the range of governance events they are currently attending. It supports considering a junior hire based on AI regulation and data-protection exposure, while making clear that the experience is academic and conference-level rather than product or client work.

Garcia lists four stops: FutureLaw 2026 in Tallinn, the Computers, Privacy and Data Protection conference in Brussels, the EMILDAI summer school on 'Building Public AI in Europe: From Data Commons to Compliance' in Avignon, and a summer school in AI Governance and Comparative Law in Warsaw.

• The post says each event had a different focus, audience and perspective, but one theme recurred: 'How do we move from principles and regulation to practical implementation?' Garcia writes that the most valuable conversations were not about technology itself but about people, institutions, trust and the practical challenge of turning frameworks into real-world outcomes.
• They frame the Erasmus year as learning from communities and conversations, not only lectures.

For brands planning a campaign

This is the strongest single piece of evidence for the implementation half of AI governance work: sustained engagement with practitioners across several jurisdictions, framed around the gap between principles and practice.

• It helps when a brief calls for someone who can work between policy and product, but records attendance and themes rather than a delivered project.
• Ask about hands-on implementation work.

Garcia describes a semester at Universidad de León with four strands: cybersecurity, including hacking and cybersecurity in business and information management; digital rights and regulation, including fundamental digital rights, digital offences, privacy and data protection; AI and emerging technologies, including comparative law of AI and new technologies and the law and ethics of AI; and blockchain, cryptocurrencies and AI. The post connects these studies to an earlier background in law and international trade and describes the direction as AI governance, cybersecurity, digital regulation and emerging technologies, with an open invitation to connect with people in neighbouring cities.

For brands planning a campaign

Directly relevant to a brief about building compliance frameworks for AI products: the coursework covers AI law, data protection, digital rights and cybersecurity in a business context, the regulatory ground a junior specialist would work on. This is a curriculum list; ask about applied compliance work.

In the Dublin reflection, they list data governance, GDPR, AI regulation, comparative digital law, legal research and trustworthy AI as first-year study areas.

• Their stated goal is to build responsible AI governance frameworks, connect policy with implementation, and help organizations navigate digital transformation responsibly.
• The summer post echoes that focus: the most valuable conference and summer-school conversations, they write, were about people, institutions, trust and turning ambitious frameworks into real-world outcomes.

Conference and summer-school attendance is a main learning channel: IASEAI in Paris, FutureLaw in Tallinn, CPDP in Brussels, ICANN in Dublin, the EMILDAI summer school in Avignon on public AI in Europe, and an AI governance and comparative law summer school in Warsaw.

The posts describe study areas and event attendance, including work on compliance frameworks, but do not show a completed framework, client engagement or published legal analysis.

For brands planning a campaign

The posts are the closest match to a legal tech brief about AI compliance frameworks.

• They show a clear problem statement and command of the vocabulary, but not a delivered framework.
• Before treating Garcia as a practitioner, a brand should ask for a concrete work sample, such as a compliance gap analysis, an AI risk assessment or a policy draft.

Examples: Source 1 · Source 2

Garcia also attended the Computers, Privacy and Data Protection (CPDP) conference in Brussels, covered in the summer roundup alongside the Avignon public-AI summer school.

For brands planning a campaign

For a product with European data-protection obligations, this is a positive literacy signal, particularly the GDPR and digital-rights framing. The evidence comes from classroom and conference settings; a brand should test whether Garcia can apply the rules to a specific product flow, not just discuss them.

Examples: Source 1 · Source 2 · Source 3

Garcia describes the semester as connecting their background in law and international trade to a current focus on AI governance, cybersecurity, digital regulation and emerging technologies.

For brands planning a campaign

Useful for a compliance product touching security-adjacent questions such as incident handling, security-by-design duties, or crypto and blockchain assets. The posts list courses; a brand should test depth with a written exercise on a security or data-breach scenario.

Examples: Source 1 · Source 2

Garcia frames the lawyer of the future as a translator between law, technology, policy and business, and sees cross-jurisdictional, interdisciplinary work as central to the master's program.

For brands planning a campaign

Breadth across jurisdictions and technology areas suits early-stage work on multi-market compliance frameworks, where a junior hire maps requirements rather than owning a single regime. A brand should define the first deliverable narrowly, since the posts do not document a specific specialization with an attached output.

Examples: Source 1 · Source 2

Two are conference and summer-school roundups; one is a semester preview. The format suits education and career storytelling more than technical explainers, case analysis or arguments aimed at a professional audience.

The posts focus on education and career development rather than technical analysis.

For brands planning a campaign

A brand evaluating content collaboration would be looking at education and career-narrative posts, not practitioner commentary or thought leadership. For a campaign publishing analysis on AI regulation, ask for a writing sample in that register.

Examples: Source 1 · Source 2 · Source 3

They credit the year with deepening their interest in trustworthy AI.

View example

View example

They place it among a summer of AI governance and digital law events across Europe.

View example

Souza does so through digital skills, STEM pathways and women’s retention in digital careers. They work in Women4Cyber Luxembourg and contribute as a pillar lead to two Connecting Women in Digital working groups.

Souza focuses on the talent pipeline and gender equality in digital work, using advocacy and audience reaction to a panel question.

• Garcia focuses on AI regulation and data protection as legal disciplines, drawing on course lists and conference themes.
• They also write about tools and recommendations tested against real contexts, while Garcia’s posts stay at the level of study and learning.

Read original · Original 2

Lemmon’s Fabric delivery post describes UK and EU data protection and ISO 27001 controls settled at discovery—the applied version of the implementation question Garcia keeps raising.

Lemmon is a vendor-side practitioner whose posts cover client outcomes with timelines, a free readiness review, and training in Fabric, Power BI, GDPR and breach response.

• Garcia reflects on coursework and conferences.
• For a buyer seeking delivered project work, ask for a work sample.

Read original · Original 2

K. wrote a final paper on privacy obligations and accountability in cybersecurity incident response and drafted a proposed hiring-accountability bill. Garcia frames the master’s around implementing AI governance.

K. brings HR and marketing leadership experience and a US legal studies qualification to studies in employment law and cybersecurity law; the posts are motivational, grade-focused reflections. Garcia’s European, comparative programme centres on AI regulation, digital rights and policy, with conference attendance as the main learning channel rather than grades.

Read original · Original 2

The posts focus on that earlier part of the pipeline: Pillar Lead work on two Connecting Women in Digital working groups, one on vocational education as a route into digital careers and the other on what shapes whether girls see themselves in STEM; the Digital Talent EU Days 2026 programme in Dublin; a contribution to the Women in Digital Index 2026 for Luxembourg; and opening remarks introducing Women4Cyber Luxembourg at a science night. A provider seeking to frame its AI governance and data-protection certificate as part of a wider talent question can use that material directly: it already addresses employers, education and employment services, and policy readers.

The tradeoff is register and subject.

• Souza's posts argue a case: they describe working-group recommendations, ask whether those tools will hold up across different European contexts, and explain why the advocacy work must continue.
• They do not walk readers through a curriculum, course or exam—the specific need for early-career lawyers and compliance staff seeking a concrete certificate.
• A provider choosing Souza gets a partner who can explain why the training matters and who it is for, but gives up the first-person study record and named conference and summer-school circuit that make a certificate concrete for early-career lawyers and compliance staff.

Examples: Source 1 · Source 2

One post details a Microsoft Fabric platform delivered for a security services provider running hundreds of sites across the UK and Europe.

• It spells out the decisions: one customer dimension across two source systems, hourly refresh replacing an overnight reload, new sources added by configuration instead of change requests, and UK and EU data protection and ISO 27001 controls designed at discovery.
• A second post lists a training catalogue covering Fabric, Power BI and Microsoft certification preparation, GDPR and EU AI Act material, DPIA and ROPA workshops, subject access requests, breach response and cybersecurity awareness.
• A provider selling an AI governance and data-protection certificate gets a register that shows governance skills applied in delivered work, which the study posts do not show.

The tradeoff is that this is a supplier's own pitch, not an independent voice.

• The posts promote Datahub Consulting's services and invite direct enquiries, so a provider borrowing the register risks sounding like another vendor advertisement.
• The implied audience is buying organisations, not early-career individuals weighing a qualification.
• The training listing also overlaps with what the provider sells: AI, GDPR, data protection and cybersecurity training all appear in it.
• Choosing Lemmon brings demonstrated delivery detail and a practitioner voice, but not the learner-side narrative; the provider would also sit alongside an adjacent competing offer.

Examples: Source 1 · Source 2

The posts follow a Master of Legal Studies at Texas A&M from the final semester through submission of a last paper on privacy obligations and accountability in cybersecurity incident response, and describe drafting a proposed bill on accountability and transparency in hiring.

• The learning narrative follows the same course-by-course, exam-by-exam shape as Garcia's, but is anchored in what the student produced: a written paper, a drafted bill and dual certificate tracks in HR and employment law and cybersecurity law.
• A provider whose certificate attracts career-changers from marketing, communications or operations gets a closer match than one aimed at law graduates.

The tradeoff is the material itself.

• The posts are mainly personal reflection: grades, assignment counts, workload and lessons about persistence.
• They do not work through the European framework behind the certificate, and offer no GDPR or EU AI Act detail or European institutional or conference circuit.
• A provider choosing this register gets an honest account of what studying felt like and what the student finished, but not the EU regulatory context or named European events that make an AI governance course concrete for a European compliance audience.

Examples: Source 1 · Source 2